Privacy policy

In the event of any discrepancy between this translation and the French version, the French version shall prevail.

Last updated: 15 June 2026

This privacy policy explains how Rupteur SA collects, uses, stores and protects personal data in connection with the use of the website www.rupteur.ch, the online shop, customer accounts, orders, contact requests, garage appointments, and applications or services linked to Rupteur.

We process personal data in accordance with Swiss data protection legislation, in particular the Federal Act on Data Protection (FADP). Where the General Data Protection Regulation (GDPR) applies, in particular to persons located in the European Union or the European Economic Area, we also comply with its requirements.

1. Controller

The controller is:

Rupteur SA
Ch. de la Verseuse, 9
1219 Aïre / Genève
Switzerland
Telephone: +41 22 796 26 26
E-mail: [email protected]
Website: www.rupteur.ch

2. Personal data collected

Depending on how you use our services, we may process the following categories of data:

• Identification and contact data: surname, first name, address, e-mail, telephone number, delivery and billing address.
• Customer account data: login credentials, order history, preferences, saved vehicles, basket, favourites or similar information.
• Vehicle-related data: information entered to identify a compatible part, for example make, model, engine, year, registration number, type approval or other technical information.
• Order data: items ordered, amounts, invoices, returns, warranties, exchanges, communications relating to an order.
• Payment data: chosen payment method, payment status, transaction reference, amount, date and information necessary to process the payment. We do not store full payment card numbers.
• Delivery data: delivery address, information necessary for transport, tracking, any returns or transport claims.
• Communication data: messages sent via form, e-mail, telephone, WhatsApp or other contact channels.
• Technical data: IP address, device type, browser, operating system, language, pages viewed, date and time of access, server logs, security and abuse-prevention data.
• Analytics and advertising data: browsing data, conversion events, interactions with our pages or advertisements, where these tools are enabled and authorised.

3. Purposes of processing

We use your personal data mainly to:

• operate the website, the online shop, the basket and the customer account;
• process orders, payments, deliveries, collections, returns, warranties and after-sales requests;
• check the compatibility of parts or make it easier to search for products suited to your vehicle;
• respond to requests for contact, quotations, appointments or assistance;
• ensure the security of the website and prevent fraud, abuse, spam, automated attacks and unauthorised access;
• comply with our legal, accounting, tax and contractual obligations;
• improve our products, services, content, performance and user experience;
• measure the effectiveness of our advertising campaigns and our website;
• display or measure advertisements, in particular via Google Ads, where applicable.

4. Legal bases

Where the GDPR applies, we process personal data on the following legal bases:

• Performance of a contract or pre-contractual measures: order, customer account, delivery, payment, customer service, appointment.
• Legal obligation: accounting, taxation, retention of invoices, combating fraud, requests from competent authorities.
• Legitimate interest: website security, abuse prevention, improvement of our services, customer relationship management, internal statistics, defence of our rights.
• Consent: non-essential analytics or advertising cookies, certain marketing communications, or other processing subject to consent.

Under Swiss law, we process personal data transparently, proportionately and solely for the purposes indicated or recognisable at the time of collection.

5. Cookies and similar technologies

We mainly use cookies that are necessary for the website to function. These cookies make it possible, for example, to maintain a session, manage a basket, remember a language, record a consent choice, protect the website or ensure the security of forms.

We do not intend to use a large number of third-party cookies. However, certain cookies or similar technologies may be used for audience measurement, advertising or security.

You can configure your browser to refuse or delete cookies. However, refusing certain necessary cookies may prevent the website, the basket, the customer account or the ordering process from working properly.

6. Google Analytics and Google Ads

We may use Google Analytics to understand how visitors use our website, measure performance, detect problems and improve the user experience.

We may also use Google Ads to measure the effectiveness of our advertising campaigns, track certain conversions, limit the repetition of ads, improve their relevance and better understand the commercial performance of our advertising.

In this context, Google may process, in particular, technical data, online identifiers, and information relating to the device, browser, pages viewed, interactions, conversions and IP address. Depending on your settings, Google may use cookies or similar technologies.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and, where applicable, Google LLC, United States.

Further information: Google Privacy Policy, how Google uses cookies, Google advertising cookies.

You can manage certain Google advertising settings via: Google My Ad Center.

7. Cloudflare and Turnstile

We use Cloudflare to improve the security, availability and performance of the website. Cloudflare may act as a content delivery network, web application firewall, DDoS protection, traffic filtering system or security tool.

In this context, Cloudflare may process technical data such as the IP address, HTTP headers, TLS fingerprint, browser, operating system, request logs, security information and the cookies necessary to protect the website.

We also use Cloudflare Turnstile to protect certain forms or actions against bots, spam and abuse. Turnstile can operate in visible, non-interactive or invisible mode.

When Turnstile’s invisible mode is used, a security check may be carried out automatically in the background, without a checkbox being visible to the user. In accordance with Cloudflare’s terms, we expressly refer to Cloudflare’s Turnstile Privacy Addendum.

Further information: Cloudflare Privacy Policy, Cloudflare Turnstile Privacy Addendum.

8. Payments

To process payments, we use specialised providers. Depending on the payment method chosen, data may be transmitted to providers such as Datatrans / Planet, TWINT, PostFinance, Apple Pay, Google Pay, Visa, Mastercard, banks, card issuers or other payment service providers.

The data transmitted may include the amount, currency, order identifier, payment status, certain billing information, transaction data and the information necessary to prevent fraud. Sensitive payment card data is generally processed directly by the payment service provider or its certified partners, and is not stored in plain text by Rupteur SA.

Each payment service provider may process certain data under its own responsibility, in accordance with its own terms and privacy policies.

9. Delivery, suppliers and logistics partners

To fulfil orders, we may transmit the data necessary for delivery to carriers, logistics partners, suppliers or processors. This may include your name, address, telephone number, e-mail address, the contents of the consignment, the order reference and the information necessary for tracking or handling a return.

Deliveries may be made, in particular, via Swiss Post or other carriers, depending on the case.

10. Contact, WhatsApp and social networks

If you contact us by e-mail, form, telephone or WhatsApp, we process the information necessary to respond to your request. If you use WhatsApp, Meta / WhatsApp may process data in accordance with its own terms and privacy policies.

Our website may contain links to social networks or third-party platforms, for example Facebook, Instagram, TikTok, YouTube, X/Twitter or Google. Unless specifically integrated, these links are simple outbound links. When you click on them or interact with these platforms, their own privacy rules apply.

11. Google reviews and third-party content

We may display or link to Google reviews, a Google Business Profile listing, maps, buttons or content from third-party services. When this content is loaded from third-party servers or when you click on it, the provider concerned may receive technical data such as your IP address, your browser, the page viewed and the time of viewing.

12. Mobile applications and app stores

If you install or use a Rupteur application via Apple’s App Store or Google Play, Apple or Google may process certain data relating to the download, installation, updates, device or account used on the store. This processing is governed by the privacy policies of Apple or Google.

13. Recipients of data

We do not sell your personal data. However, we may transmit the necessary data to the following categories of recipients:

• IT service providers, hosting providers, CDN, security and maintenance;
• payment service providers, banks, card issuers and payment systems;
• carriers, logistics partners and suppliers;
• analytics, advertising and performance measurement providers;
• fiduciaries, legal advisers, insurers, authorities or courts where necessary;
• partners required to perform a requested service, for example workshop, fitting, warranty or after-sales service.

14. Transfers abroad

Certain providers may process data in Switzerland, the European Union, the European Economic Area, the United States or other countries. Where data is transferred to a country that does not benefit from a level of protection recognised as adequate, we ensure that appropriate safeguards are put in place, for example standard contractual clauses, contractual commitments, technical and organisational measures or other mechanisms provided for by law.

15. Retention period

We retain personal data for as long as necessary for the purposes described in this policy, for the performance of the contract, the management of the customer relationship, security, the defence of our rights or compliance with our legal obligations.

• Account data is retained for as long as the account exists or for as long as necessary for the customer relationship.
• Order, invoice and payment data is in principle retained for the period required by the applicable accounting and tax obligations, generally 10 years in Switzerland.
• Contact or support data is retained for as long as necessary to handle the request and for the possible defence of our rights.
• Technical and security logs are retained for a limited period, unless required for security, investigation, abuse or legal obligation purposes.
• Cookies have variable lifetimes depending on their purpose and provider. Non-necessary cookies can be deleted or refused via your browser or your consent preferences.

16. Security

We implement appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration or unauthorised disclosure. These measures include, in particular, encryption of communications, access controls, backups, security logs and services providing protection against attacks and abuse.

17. Your rights

Depending on the applicable law, you may in particular have the following rights:

• the right of access to your personal data;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure, within the limits of legal retention obligations;
• the right to restriction of processing;
• the right to object to certain processing, in particular direct marketing;
• the right to data portability where the GDPR applies;
• the right to withdraw your consent at any time, without retroactive effect;
• the right to lodge a complaint with a competent data protection authority.

In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (FDPIC). If the GDPR applies, you may also contact the competent data protection authority in your country of residence.

18. Exercising your rights

To exercise your rights or ask a question about data protection, you can contact us:

Rupteur SA
Ch. de la Verseuse, 9
1219 Aïre / Genève
Switzerland
E-mail: [email protected]

We may ask you for proof of identity in order to prevent an unauthorised person from accessing your data.

19. Automated decision-making and profiling

We do not take decisions that produce legal or significant effects concerning you based solely on automated processing. Automated tools may, however, be used for fraud prevention, website security, abuse detection, audience measurement or advertising optimisation.

20. Changes to this policy

We may amend this privacy policy at any time, in particular in the event of legal, technical or organisational developments. The version published on our website is authoritative.